Virtual-Only Is a Practice Model. A Mailbox Is Not a Practice Location.

There is an important distinction providers—and health plans—need to understand:

Being a virtual-only provider is legitimate. Listing a mailbox or virtual mailing address as though it were a physical practice location is something entirely different.

Providers increasingly deliver care through telehealth, mobile services, home visits, and other nontraditional practice models. Major payers have systems designed to accommodate those models. You do not need to pretend to have a brick-and-mortar office simply because you practice virtually.

In fact, listing yourself correctly as virtual-only is far more defensible than supplying an address where patients cannot actually receive care.

A Virtual-Only Provider Does Not Need a Fake Office

Aetna specifically defines a “Virtual Only Provider” as a qualified healthcare provider who provides healthcare services only through telehealth. In other words, virtual-only participation is not some loophole—it is a recognized practice model within Aetna’s own participation criteria. (Aetna)

UnitedHealthcare has gone even further in 2026 by adding specific care-setting designations such as:

• Office or clinic

• Mobile health clinic

• Virtual

• Home-based care

• Remote diagnostics

UHC explains that these settings are intended to accurately configure provider addresses for claims, credentialing, contracting, and directory purposes. For virtual and other nontraditional providers, UHC says the process may designate an address as a remote billing address specifically to prevent nonphysical addresses from appearing in the provider directory as in-person locations. (UHC Provider)

That distinction is crucial.

A billing address can be one thing.

A correspondence or mailing address can be another.

A physical practice location is something else entirely.

They should not be treated as interchangeable.

A P.O. Box Can Be a Mailing Address. That Doesn’t Make It an Office.

There is nothing inherently improper about maintaining a P.O. box or commercial mailing address for business correspondence.

The problem begins when that mailing address is submitted, maintained, or published as a practice location—particularly when the directory represents that patients can receive care there.

Aetna’s own enrollment materials demonstrate the distinction. Its NPI submission process permits a P.O. box in the billing location information, while its network facility form separately requires the official primary service address and expressly says not to provide P.O. box information for that location. (Aetna)

UnitedHealthcare makes essentially the same distinction in its claims guidance. A P.O. box or lockbox belongs in the Pay To Address field when applicable. The billing/practice-location information requires the appropriate street-address information instead. (UHC Provider)

CMS follows this same basic principle. Medicare enrollment materials distinguish a correspondence mailing address—which may include a P.O. box—from a business primary practice location, for which a P.O. box is not acceptable. (Centers for Medicare & Medicaid Services)

So the issue isn’t whether a provider is allowed to receive mail somewhere.

Of course they are.

The issue is whether that address truthfully represents where and how care is delivered.

Virtual Offices Create the Same Problem When No Care Occurs There

Calling something a “virtual office” does not transform it into a healthcare practice location.

There are businesses that will rent a provider:

• a street address,

• a suite number,

• mail forwarding,

• package receiving,

• receptionist services,

• occasional conference-room access, or

• a prestigious business address.

Those services may be perfectly legitimate for administrative purposes.

But if patients cannot actually make an appointment and receive the services represented in the payer directory at that address, it should not be represented to patients as an ordinary office practice location.

The relevant question is not:

“Does this address technically exist?”

It is:

“Does the provider actually furnish the represented patient care at this location?”

UnitedHealthcare’s directory requirements are particularly instructive. UHC tells providers to maintain “office locations where the provider accepts appointments only” and separately asks providers to identify telehealth services. (UHC Provider)

That makes it very difficult to justify a directory entry simply because a mailing company assigned someone a suite number.

Even Medicare Has a Better Solution for Telehealth Providers Working From Home

Privacy is a legitimate concern.

Many virtual providers work from home and understandably do not want their residential street address displayed publicly.

But the solution is not to manufacture a patient-facing office.

CMS now expressly allows clinicians providing telehealth-only or other non-patient-facing services from home to identify a home location in PECOS as “Home office for administrative/telehealth use only.” CMS can then suppress the street address from public display while retaining the appropriate city, state, and ZIP information. (Centers for Medicare & Medicaid Services)

That is an excellent example of how this issue should be handled:

Accurately identify the care model, then protect the provider’s privacy.

Don’t solve a privacy problem by creating an inaccurate provider-directory entry.

NCQA Also Recognizes “Virtual Only”

This isn’t an obscure distinction.

NCQA has specifically addressed virtual-only practitioners in directory standards. Its guidance says that when a practitioner has no physical office, the directory should indicate “virtual only.” (NCQA)

That is precisely what patients need to know.

A patient searching a directory should be able to distinguish among:

Office care — “I can go to this address for an appointment.”

Home/mobile care — “This provider comes to patients rather than seeing them at an office.”

Virtual care — “This provider sees patients remotely.”

Those are all legitimate models.

What is not a legitimate fourth model is:

“The directory says this is an office, but when you arrive, it is actually a mailbox.”

“But the Insurance Company Approved It” Is Not the Same as “The Insurance Company Allows It”

This may be the most important point.

Providers sometimes assume that because an enrollment or credentialing application was processed successfully, every piece of information submitted must have been affirmatively reviewed and approved as compliant.

That is not necessarily true.

Payer credentialing and directory systems process enormous volumes of provider demographic information. Automated verification, delegated credentialing, third-party data sources, provider attestations, and imperfect address-validation systems can all allow inaccurate information into a network directory.

A payer failing to catch an inaccurate address does not convert that address into a legitimate practice location.

If a provider enters the street address of a commercial mailbox facility and the payer’s system recognizes it as a deliverable USPS address, that tells us the address exists.

It does not establish that the provider practices medicine, nursing, lactation care, behavioral health, or any other healthcare service inside that mailbox facility.

Those are two completely different questions.

And insurers themselves increasingly recognize the problem. UHC specifically says its newer address configuration is intended to prevent nonphysical addresses from appearing in the provider directory as in-person locations. (UHC Provider)

That would not be necessary if every address that made it through enrollment were automatically an appropriate patient-care location.

Directory Accuracy Matters to Patients, Too

This is more than a credentialing technicality.

Provider directories exist for patients.

Imagine a patient searching an insurance directory for an in-network provider near her home. The directory produces someone apparently practicing five miles away.

She calls—or perhaps simply drives to the listed address—only to discover that it is:

• a post office,

• a UPS-style mailbox store,

• a mail-forwarding company,

• a registered-agent address,

• a virtual-office facility where the provider does not actually see patients, or

• an administrative address belonging to another company.

The directory has given the patient false information about access to care.

It can also make a network appear geographically broader than it really is.

Ten providers assigned ten mailing addresses are not necessarily ten physical access points.

That distinction becomes especially important when insurers evaluate whether their networks provide adequate geographic access to covered services.

Residential Addresses Are Not Automatically the Problem

There is another distinction worth making.

A residential address is not inherently a fake practice address.

Healthcare professionals legitimately operate businesses from home. Some provide patient care there when permitted by law and payer rules. Others use their home as the administrative base for telehealth or mobile services.

The question is always what the address represents.

A genuine home-based practice location should not be equated with a commercial mailbox simply because both may look unconventional.

Likewise, a telehealth provider’s real administrative location does not suddenly become an in-person clinic because it appears in a database.

The goal should be accurate classification—not penalizing nontraditional practice models.

The Better Approach Is Simple

If you are truly virtual-only, list yourself as virtual-only when the payer provides that option.

If you perform home visits, make sure the payer understands that you provide home- or mobile-based care.

If you have a legitimate office where patients are actually seen, list the office.

If you use a P.O. box, UPS store, mail-forwarding company, or virtual office strictly to receive mail, use it only in the administrative, correspondence, billing, or pay-to capacity permitted by the payer.

And if a payer’s enrollment system does not provide a sensible way to represent your actual care model, ask the payer how it wants the location reported rather than inventing a physical office.

The principle is remarkably straightforward:

Your provider directory listing should tell patients the truth about how and where they can receive care.

Telehealth isn’t the problem.

Virtual practice isn’t the problem.

Home-based practice isn’t the problem.

A mailing address masquerading as a patient-care location is the problem.

And the fact that an insurer’s screening process failed to catch it should never be confused with permission to do it.

Sunshyn practice resources

For help with payer applications and enrollment, see Sunshyn's insurance credentialing services.

For a structured review of documentation and practice requirements, explore the Documentation & Compliance learning pathway in the Sunshyn Learning Center.